Data-Centric Security Architect (MBSE / Sparx EA)

About the role

Leidos is seeking a Data-Centric Security Architect (MBSE / Sparx EA) to design, evolve and validate a security architecture for a cloud-based solution supporting NATO missions. The role is strictly MBSE: you must be an expert in data-centric security models with deep, practical experience using SysML and Sparx EA (or equivalent) to define information flows, security constraints and systems architecture. Candidates without MBSE modelling experience will not be considered.

Key responsibilities

• Build data-centric security-first architecture models with MBSE tools such as Sparx Enterprise Architect.
• Develop architecture views aligned with the NATO Architecture Framework (NAF v4), including security, system, technical standards/compliance, service-based and data views.
• Model security behaviour with sequences, activity flows, state machines and dependency diagrams, and trace requirements from operational concepts down to controls.
• Assist the programme team in completing the NATO Security Accreditation process for systems on restricted and classified networks, identifying compliance concerns and proposing accreditation strategies.
• Create the System Security Architecture Document, Security Target and Risk Assessment, Secure Configuration Baselines, Security Operating Procedures and Security Test & Evaluation artifacts.
• Work directly with NATO Security Accreditation Authorities and comply with the NATO Security Directive Series, STANAGs and FMN Baseline requirements.

Required profile

• NATO SECRET or national equivalent security clearance.
• Bachelor's degree in Cybersecurity, Information Assurance, Computer Science, Systems Engineering or a related field.
• 5+ years in defense security architecture, cloud security or classified system environments.
• Hands-on experience architecting Data Centric Security and Zero Trust, preferably in a military or coalition environment.
• Ability to coordinate reviews, produce documentation and close findings with Security Accreditation Authorities.
• Excellent communicator comfortable with multinational stakeholders.

Required skills

• MBSE tools and modelling languages (SysML, UML); NAF/DoDAF/UAF frameworks.
• Data-centric protection, encryption, IAM/ICAM, Zero Trust and secure system design.
• Standards such as NIST 800-207, NIST 800-53, ISO 27001, CIS and NATO cyber/INFOSEC frameworks (STANAG 4774, 4778, 5636, ACP 240).
• Risk analysis, vulnerability assessment and mitigation definition.
• Preferred: Master's degree, ZTDF expertise, NATO accreditation experience, CompTIA Security+, CISSP, CCSP, Zero Trust, ICAM or cloud security certifications, and MBSE tool training.